Overview

overview

10

Static

static

10

.rsync/a/a

linux_amd64

.rsync/a/a

linux_armhf

.rsync/a/a

linux_mips

.rsync/a/a

linux_mipsel

.rsync/a/cron.d

linux_amd64

.rsync/a/init0

linux_amd64

.rsync/a/init0

linux_armhf

.rsync/a/init0

linux_mips

.rsync/a/init0

linux_mipsel

.rsync/a/run

linux_amd64

.rsync/a/run

linux_armhf

.rsync/a/run

linux_mips

.rsync/a/run

linux_mipsel

.rsync/a/stop

linux_amd64

.rsync/a/stop

linux_armhf

.rsync/a/stop

linux_mips

.rsync/a/stop

linux_mipsel

.rsync/b/a

linux_amd64

.rsync/b/a

linux_armhf

.rsync/b/a

linux_mips

.rsync/b/a

linux_mipsel

.rsync/b/run

linux_amd64

.rsync/b/run

linux_armhf

.rsync/b/run

linux_mips

.rsync/b/run

linux_mipsel

.rsync/b/stop

linux_amd64

.rsync/b/stop

linux_armhf

.rsync/b/stop

linux_mips

.rsync/b/stop

linux_mipsel

.rsync/c/go

linux_amd64

.rsync/c/go

linux_armhf

.rsync/c/go

linux_mips

Analysis

  • max time kernel
    0s
  • platform
    linux_amd64
  • resource
    ubuntu1804-amd64-en-20211208
  • submitted
    20-05-2022 13:28

Sharing

Copy URL
Twitter E-mail

Errors

Reason
platform exec: Failed to copy payload to .rsync/a/cron.d -> open .rsync/a/cron.d: no such file or directory payload error: fork/exec /tmp/344107211/payload.dat: no such file or directory
Report Analysis Logs

General

  • Target

    .rsync/a/cron.d

  • Size

    2.3MB

  • MD5

    045c62cc67de6b0112a9f61fd93db30e

  • SHA1

    8e40210894fbdf502488b137f6be3db6bf40d7f1

  • SHA256

    e74d0a1db81a6d9dcd8d7032fa5ca1e65592dee86910b1ccac36b23b246ed2e8

  • SHA512

    648673b470ab008d90d1663f9c1a00e0d9485b1dc9e975aede4bb53edc703bf184eb86a31e93ff18309af03abedfc4e50bc25cf63f0fdb10a76c268d5db1ba59

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/344107211/payload.dat
    /tmp/344107211/payload.dat
    1⤵
      PID:592

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads